Legal
Last updated: 17 July 2026
QRHero.com and the QR Hero service (the “Service”) are provided by Etcetera Digital LLC, 30 N Gould St., Suite 2413, Sheridan, WY 82801, USA (“QR Hero”, “we”, “us”, “our”).
For the personal data described in this policy, we are the data controller, except for scan data and end-user data that we process on behalf of our customers, where we act as a data processor (see section 4).
You can reach us about anything in this policy at privacy@qrhero.com.
This policy covers:
Account data. Name, email address, password (stored hashed), organization details, language preference, and optionally your Google account identifier if you sign in with Google. We use this to create and secure your account, provide the Service, and communicate with you. Legal basis: performance of a contract.
Billing data. Company name, billing address, VAT or tax identification number, plan and subscription details, invoices, prepaid credit wallet balance, and payment method details. Card details are collected and processed by our payment processor (Stripe); we do not store full card numbers. VAT numbers may be validated against the public VIES (EU) and HMRC (UK) services. Legal basis: performance of a contract and compliance with legal obligations (tax and accounting).
Content you provide. The content of your codes and pages - for example vCard details, menu content, link destinations, images, and landing page text. This may include personal data you choose to include. Legal basis: performance of a contract.
Scan data. When an end user scans a code or opens a short link, we record the event: timestamp, the code or link scanned, coarse location (country, and where available region/city, derived from network-level geolocation - we do not collect GPS locations), device type, operating system and browser family, referrer, network provider, and - only where the customer has enabled it and any legally required consent has been given - a privacy-conscious browser fingerprint used to estimate unique visitors. See section 4 for roles and responsibilities.
Usage data. How the dashboard is used (pages viewed, features used, approximate performance data), for security, support, and product improvement. Legal basis: legitimate interests.
Support data. Messages you send to support@qrhero.com, hello@qrhero.com, partners@qrhero.com, or privacy@qrhero.com, and related correspondence. Legal basis: legitimate interests and, where applicable, performance of a contract.
Marketing data. If you opt in, your email address and preferences for product news. You can withdraw consent at any time using the unsubscribe link in any marketing email. Legal basis: consent.
We do not knowingly collect data from children under 16, and the Service is not directed at them.
When you scan a QR code created by one of our customers, that customer decides what the code does and what data collection is enabled (for example whether analytics or tracking pixels run on the destination page). For that data, the customer is the data controller and QR Hero processes the data on their behalf under our Data Processing Agreement.
Where required by law (for example for visitors in the EU/EEA and the UK), non-essential cookies, tracking pixels, and fingerprinting signals are only set after consent has been given through the consent banner shown on the scan destination, in line with the customer’s configuration.
If you have questions about how a specific QR code uses your data, the party responsible is the business whose code you scanned. We will assist them in answering data subject requests, and you can also contact us at privacy@qrhero.com - we will forward your request to the customer concerned where we are not the controller.
See our Cookie Policy for details of the cookies used on qrhero.com and on scan destinations, and how to manage them.
We share personal data only with:
We do not sell personal data, and we do not share it with third parties for their own advertising purposes.
Customer data is primarily hosted on servers in the European Union, with Cloudflare’s global edge network in front of our redirect and web traffic. Because Etcetera Digital LLC is a US company, and some of our sub-processors are located in the United States or operate globally, personal data may be accessed from or transferred to countries outside the EEA/UK.
Where personal data protected by the GDPR or UK GDPR is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement, as applicable), together with supplementary measures where appropriate.
Scan data and account data are retained for up to 2 years from collection, or for the shorter retention window configured on the relevant customer account, after which they are deleted or anonymized. Audit logs are kept for 2 years. Invoices and records needed for tax and accounting are kept for the period required by applicable law. Support correspondence is kept as long as needed to handle the matter and for a reasonable period afterwards.
When you delete your account, we delete or anonymize your personal data within the periods above, except where we must retain it by law.
We protect personal data with technical and organizational measures including encryption in transit (TLS) on all customer-facing endpoints, tenant-level data isolation enforced at the data layer, role-based access control and audit logging for staff access, bot protection on signup, and regular off-site backups with defined retention. No system is perfectly secure; we encourage you to use a strong, unique password.
Depending on where you live, you may have the right to access, correct, export (data portability), or delete your personal data, to restrict or object to certain processing, to withdraw consent at any time (without affecting prior processing), and to lodge a complaint with a supervisory authority.
To exercise your rights, contact privacy@qrhero.com. We may need to verify your identity before acting on a request. If your request concerns data we process on behalf of a customer, we will refer it to them and assist them in responding.
We may update this policy from time to time. We will post the updated version on this page with a new “Last updated” date, and for material changes we will notify registered users by email or an in-app notice.
Etcetera Digital LLC 30 N Gould St., Suite 2413 Sheridan, WY 82801, USA
Privacy: privacy@qrhero.com General inquiries: hello@qrhero.com